Pingodra

Privacy policy

Last updated 29 October 2026

Pingodra is run by Octernix (“we”, “us”). This policy explains what personal data we handle, why, and the rights you have under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Two kinds of data, two roles

  • Your account data. When you sign up, we decide why and how this data is used, so we are the data fiduciary for it.
  • Your contacts. The phone numbers and other details you import belong to your business. You decide who to message and why, so you are the data fiduciary and we act as your data processor. We only use your contacts to send the messages you ask us to send.

What we collect

  • Account details: name, email address and/or mobile number, and a password hash if you use one.
  • Login data: session cookies, IP address and browser type, used to keep you signed in and secure.
  • WhatsApp connection: your Phone Number ID, WhatsApp Business Account ID, access token and App Secret. Tokens and secrets are stored encrypted.
  • Contacts you import: phone numbers and the sheet columns you choose (such as name, city and state), the consent statement you provide, and whether a contact has opted out.
  • Billing: your plan, order and payment IDs, and amounts. Card, UPI and bank details go directly to Razorpay and never reach us.
  • Usage: how many messages you send each month, for plan limits.

Why we use it

  • To create and secure your account, including sending login codes and email verification links.
  • To import your contacts and send your WhatsApp messages through Meta's WhatsApp Business Platform.
  • To honour opt-outs, including STOP replies received through your webhook.
  • To take payments, enforce plan limits and keep records required by law.
  • To answer your support requests and grievances.

We don't sell personal data, show ads, or share one customer's contacts with any other customer.

Who we share it with

Only the service providers needed to run Pingodra:

  • Meta Platforms (WhatsApp Business Platform), to deliver your messages.
  • Supabase, which hosts our database.
  • Vercel, which hosts the application.
  • Razorpay, which processes payments.
  • Resend, which sends our account emails.
  • Google, if you choose to sign in with Google or import from Google Sheets.

Some of these providers process data outside India. We may also disclose data where Indian law requires it.

How long we keep it

We keep your data while your account is open. When you delete your account (Settings → Delete account), we erase your account, your contacts and your WhatsApp connection straight away. We may keep payment records for as long as tax and accounting laws require.

Your rights

Under the DPDP Act you can:

  • ask what personal data we hold about you and how we use it;
  • correct or update it;
  • erase it, which you can do yourself by deleting your account;
  • withdraw consent, which stops future processing;
  • nominate someone to exercise these rights for you; and
  • raise a grievance with us, and then with the Data Protection Board of India if you're not satisfied.

If you are a contact who received a message sent through Pingodra, the business that messaged you decides how your data is used. Reply STOP to stop receiving their messages, or contact that business. You can also write to us and we'll pass your request on.

Security

Data is sent over encrypted connections, access tokens are encrypted at rest, and every customer's data is kept separate. No system is perfectly secure. If a breach affects your data, we'll tell you and the Data Protection Board as the law requires.

Cookies

We use only the cookies needed to keep you signed in. We don't use advertising or tracking cookies.

Children

Pingodra is for businesses and isn't meant for anyone under 18.

Changes and contact

We'll post changes here and update the date above. For questions, requests or grievances, see our contact page or email octernix.studio@gmail.com.